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The Examiner has rejected Ciahtis 1-8, and 10-31 imder 35 IJ S.C. 103(a) as being unpatentable 
over Aronson et al. (U.S. Patent No. 6,654,787 Bl), in view of Leeds (U.S. Patent No. 6,393,465 
B2). 

Gmup m: Galms L 3, 7-H, 13-15, 17, and 27-28 

With respect to the independent claims, the Examiner has relied on Col 4, lines 51-56; Col. 5, lines 
50-67; and the Abstract in Aronson along with Col. 3, lines 54-67; and CoL 4, lines i-35 in l.,eeds to 
make a prior art showdng of appellant's claimed "identilying an authority hosting tbe network 
address" (see the same or similar, bat not necessarily identical language in the independent claims). 

Appellant respectfuUy a.sseits thai the excerpis from 1 eeds relied on by tlie Hxaminer only relate to a 
host computer associated with a sender of an electronic mail message (see Abstract and (;~ol. 4, Hnes 
66-67, specificaily). In addition, Leeds discloses that '^'if a message has puqDortedly been relayed 
tliroiigh a machine named mailiromnowherexom and tlie mail handling system has determined that 
such a machine does not actually exist, the confidence rating for the message should be increased." 
Clearly, detennining a host computer/host name of a sender of e-mail or re lay, as in Leeds, does not 

meet appellant's specific claim language, namely an " authority hosting die n.etwMfe address " 

(emphasis added), as claimed by appellant 

1 uithL! .ippelLiut lespijctlulh assoits thai die excetpK '\tonson tehcd iq^on b\ the LAamnie? 
nitfiels di^clo^c ihaf ' [ojther cuntemplatt-d m>v handling fdtet aKuhiiu^ wdi fikci e-Uijii based ou 
(l) wotd 01 It'ttei fiequn?n>.s vni^^^s {2! I? sO.> vc ttcquenc> analsss^ i^} m!sv,pell!ng anaUsis 
(unwanted c-nmii ohi.'ii contains nnsspcUed words), {^4) word or lettei coinbmation anai>S5», (5) 
technical or legal RFC822 header compliance; and (6) feature extraction & analysis (e.g., based on 
phone nmnbers. URL's, addresses, etc.)" (emphasis added). Clearly, filtering e-mail based on IP 
source frequency and feamre extraction & analysis fails to even suggest "identifying an authority 
hosting tlie network address" (emphasis added), as claimed by appellant. 
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In additicm, the Examiner argued that "Ar[o]nson disclosed that the source header data from an 
incoming e-mail address {jyKKaikit'ioK ouA w anah/ed bv the spam piobes" Fuahei the 
Examiner ai-gued that '[t]he source he/d.. d.^.r.^ ■rc'iule'; the jsP (in tl!i<; case 'ao! ) hosung the 
spammer's net^\orK address (see col 4 Lne- ^-o'', Xppollant disagrees and R^pecifulK asserts 
that ihe cxtetpl ironi •\ion-,on situph discloses thai ■^ynxm psubc is an i.-mail addtcsb ickt.{ed to 
make m, v\a) onto as many spam madtnu issis as possibie \u)0-on connmits, icachtng thdt [i]t is 
also selected to appear high up on spannneis' hsts m oides to iecei\e spam tnadings e<uj\ hi die 
mailing process'" usmg an e-mad address such as '' aard%ark(f(,aoj com ' Clearly, the meic 
disclosure of usitig an e-mail address in a spam probe, as in .4ronson, completely fails to even 
suggest "identifying an authority hosting the network address " (emphasis added), as claimed by 
appeilant. 

In the Examiner's Answer dated 07/02/2007, the Examiner asserts that 'it is evident that a "hoisting 
authority" or a "avithority hosting" the network address (i.e. email address) can in fact be the hviernet 
senice provider (ISP)' and that "it is not possibie to send e-mai! or electronic tnail without the 
presence of an hiteniet Service Provider." The Examiner goes on to allege that in 'a SPAM omil 
coming from, %ammett?|;ao| c^ "aol.com" signifies the identity of the hosting authority that 
supports/liosts (i.e. mairUains information in its serv'-ers that uniquely identifies the Spammer) the 
Spammer's address.' 

In addition, the Examiner states that "Leeds in particular discloses a melliod of reducing junk mail 
(SPAM) in which various filters are applied to the incoming mail to determine whether the sent 
mails is SPAM raai! or not." The Examiner relies on {.^oL lines 57-67; Col 4, lines 65-67; and 
Col. 5, lines 13-33 from Leeds and asserts that "Leeds clearly discloses identifying the hosting 
authority that is hosting the network address." Finally, the Examiner states that 'appellant in his 
own specification on page 12 lines 9-14 has described the same "WfJOLS" method to identify the 
ISP (hosting authority) associated with the network address.' 

Appellant respectfully disagrees and notes (hat the above reference exceipts relied on by tlie 
Examiner merely teach that "[tjhe sender's origination infonnation is extracted from the e-mail 
message and an automatic reply (called a verification request) is created aivd sent" (Coi. 3, tines 59- 
61 -• emphasis added), in addition, the excerpts teach that 4S941493@ttotareakddress.com is 
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kokm dcny-n into a user k1 (48941493) and a lioM name (notareaiaddress-com) (Coi. 4, lines 65-67 - 
emphasis added). Further sdll, the excerpts teach that '[sjince junk e-mails often come from either 
non-existent users or non-existent isites or both, a first levei check is to determine if the alleged 
sender[s] identified by the "From:" or "Reply-To:" fields are valid ' and that '[t]his first level check 
corresponds to issuitig a verifjcation request and can be in many forms, inclrtding,,. using the UNIX 
"vvhois" connnand to determinie If a site (or host) by that name actuallv exists ' (Col. 5, lines 1 6-25 - 
emphasis added). 

However, merely extracting sender origination information, such as a host name, from an e-mail 
message header , and using a UNIX "whois'* command to determine if the host actually exist;s, as in 
Leeds, does not teach actually "identifying an aithority hosting the, , netwo rk , , address" (emphasis 
added), as claimed by appellant. 

StiH with respect to the independent claims, the Examiner has again relied on the Abstract; Col, 3, 
lines 54-67; and ("ol. 4, lines 1-35 in Leeds to make a prior art showing of appellant's claimed 
"generating a report containing the identified network address and hosting authority'" (see flie same 
or similar, but not necessarily identical language in independent claims), 

.Appellant respectfijUy asserts that the only suggestion of a "report" in the excerpts relied on by the 
Examiner merely relates to "seed addresses [which] can alert an e-mail provider to potetitial mass 
mailings by reporting when mail is received for ghost or non-existent accounts." Clearly, aleiting an 
e-mail provider when an e-mail is received for a seed address, as in Leeds, fails to even suggest 
"generating a repoit containing the MMtjjjed JigMork^^^^^ and hosting Mthorj^^^^ ^ (emphasis 
added), as claimed by appellant. 

Further, the Examiner argued that "Leeds also describes the similar process of identifying the host 
name of the spammer's address (please see col.4, lines 60-67 & col.5, lines 1-45)." Appellant 
disagrees and respectfully asserts that Leeds simply discloses tltat *[t]he fields for "Return Path;," 
"From;,'* and "Reply-To:" are highlighted as three of the fields which the present invention will 
parse from the message header.' As an example, Leeds teaches that "From; 
48941 493@ notarealaddre$$.com is broken down into a user id (48941493) and a host name 



( noMmladdressxom )" (emphasis added). Leeds continues, disclosing that 'a fet level check is 
[used] to detemiine if the alleged sender identified by the "From:" or "Reply-To." fie!ds are valid.' 

^^0!eo\or. Leeds discloses that the first le\ei check Inciudfcs] i i i scpjiru inc^-a: -,c to the user 
idciUificd b\ the 'Ttom " oi 'RepI\-To" fields <ind exjimmuiir whefhci The nu'^3a;j;c can be 
.successful!\ delncted {2} using the lAiK " w hms " conuDand to Jcierrauic i\ a sue (or hosi) b\ thdl 
name actualh evsMs, {3} uMng the LNiX "fingei" command lo ident!f\ if a u<;et name exists at a 
\'enfiablo host. (4} usnig tlic "\rf y " comraaiid when connected to a sendmail daemon to verify that a 
user exists at a particular site, and (5) using the UNIX " tracerotite " command to make sure there is a 
valid route back to the specified host' (emphasis added). Clearly, performing a first level check 
including using whois, and traceroute to verify tlie host name from the "From:" and "Reply-To:" 
fields, as in Leeds, fails to even suggest "generating a report containing tlie identified network 
address and hosting authority " (emphasis added), as claimed by appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner asserts that "'in addition to identifying 
the network address and hosting authority. . , Leeds discloses maintaining (1) a list of mail of certain 
mail providers (i.e. hosting autiiorities/iSPs) known to be an origination point of junk email, , . (2) a 
dictionary of certain content frequently found in junk email, and (3) a learning knowledge base that 
creates its own rules to ascertain prior Jimk e-mail characteristics" (emphasis removed), and that 
Leeds "subsequently adds those criteria to the knowledge base to prevent future junk e-mail with the 
same or similar characteristics from being delivered." 

Further, the ILxaminer states that "Leeds discloses that the ndes ate continuously modified and 
maintained i.e. stored with the list of nanies and addresses of the spammers and their hosting 
authorities as new SPAM e-mails arrive,/' and that therefore "the list containing the names and 
addresses of the spammers and their hosting authorities can be called a report, which can be sent or 
transmitted to related authorities for appropriate action." 

Appellant respectfully disagrees and notes that Leeds merely teaches "maintaining (1) a list of 
certain iiiail providers known to be an origination point of junk e-mail, (2) a dictionary of certain 
content frequentiy found in funk e-mail and (3) a learning knowledge base that creates its own rules 
to ascertain prior junk e-mail characteristics" (CoL 4, lines 29-33 -- emphasis added). However, 
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merely maintammg a fet of maJl.pm'viders as in Leeds, fails to specifically disclose "generating a 
report contanung the MgjjlMgd . netw and hosting autlrority" (emphasis added), as 

claimed by appellant. 

Fuilhc! With icbpett to LVjch oi the mdopcndcm claims the fvimtnci hab rehcJ i^n C<^\ I hncs 60- 
67 (, ol hues 1-44, antl Col 6 Inies in 1 ceds to make a puoi ^ut showing d}>pc'ilant\ 

cLmned technique 'Vheieiti identifvmu the ho^img authotu\ cosnpsLses ulentifsmg an uvsnet uf a 
network domain tsee {he same oi smidar but not necessarily identical language ui tlic independent 
claims). 

Appellant respectfully asserts that the excerpts from Leeds relied upon by tlie Examiner merely 
disclose 'a first level check is to determine if the alleged sender identified by the "From: " or "Repiy- 
To:" fields are valid' (emphasis added). In addition, Leeds discloses *using the L%'IX " whois " 
command to detennme if a site (or host) by that lumie aciually exists' (emphasis added). Clearly, 
using whois to perform a first level check to eiisure the host actually exists for the alleged sender in 
the "From:" or "Reply-To;" fields, as in Leeds, fails to even suggest a technique "wherein 
identifying the hostin g aM^ comprises identifying <>f ^ network domain " (emphasis 

added), as claimed by appellant. Appellant respectfully asserts that merely ensuring that a host 
actually exists fails to even suggest "identifying an owner of a network domain," as claimed by 
appellant. 

In the Examiner's Answer dated 07.''02/2007, the Examiner fails to respond to appellant's arguments 
with respect to appellant's claimed technique "wherein identifying the hosting authotity comprises 
identifying an owner of a network domain/' Thus, a notice of allowance or specific prior art 
showing of each of the foregoing claim elements, in combination with the remaining claimed 
features, is respectfully requested. 

Appellant further notes that in the Examiner's Answer dated 07./02.'''2007, the Examiner argties that 
"appellant... alleges tliat there is not motivation to combine the prior ait references," and that 
"Leeds... has a learning knowledge base that continually maintains a list of hosting authorities and 
addresses that are culprits of .sending junk mail." 
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Appeliant respectfully disagrees and notes tliat Leeds merely discloses mamtaining a list of mail 
pmyMefg > a dictiongy of common Junk txml conteiit, and a knowledge base which creates nijes for 
detentiitting junk mail characteristics, as mentioned above, which clearh' does not specificaily 
suggest a "learning knowledge base that continually maintains a list of. , . addresses that are culprits 
of sending junk mail" (emphasis addc^), as noted by the Examiner. 

To establish a prima facie case of obviousness, three basic criteria must be met. First, there must be 
some suggestion or motivation, eitlier in the references themselves or in the knowledge generaily 
available to one of ordinary skill in the art, to modify the reference or to combine reference 
teachings. Second, there must be a reasonable expectation of success. Finally, the prior art reference 
(or references when combined) must teach or suggest ail the claim limitations, lite teaching or 
suggestion to make the claimed combination and the reasonable expectation of success must both be 
found in the prior ait and not based on appellant's disclosure. In re FaeckM'? F-2d 488, 20 
USPQ2d 1438 (Fed.Cir.199i). 

Appellant respectfiilly asserts that at least the third eletiient of xh& prima facie case of obviousness 
has not been met, since the prior art references, when combined, fail to teach or suggest all of the 
claim limitations, as noted above. 

Group m: Ciaims Z 18, ami 24 

With respect to Claim 2 et al, the Examiner has relied on Col. 4, lines 36-67; Col, 5, lines 1-44; and 
C;oi 8, lines 34-57 in Leeds to make a prior art .showing of appellant's claimed "transmitting the 

generated report to the identified hosting authority." 

Appellant respectfully asseits that the only mention of any sort of report, in such excerpts from 
Leeds, is the teaching that 'addiesses could be watched for incoming junk e-mail and a notification 
from the authentication server could then be broadcast to uset^ indicating that mail witii tJie subject 
of *'XYZ" is junk e-mail' (see^ specifically. Col. 8, lines 47-50), Clearly, such notification sent to 
users does not meet appellant's claimed "transmitting the generated report tcLtMj^ltifiedjK)Mi2g 
authority " (emphasis added), as claimed by appellant. 
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In the Examiner's Answer dated QllQlllfMI, the Examiner alleges that "the list containing the 
names and addresses of the spamniers and their hosting authorities is technicaUy a report, which can 
be sent or transmitted to related authorities for appropriate action." Further, the Examiner reSies on 
Col lines 5^-67 and Co! 4, lines 65-<i7 of Leeds and further states that ''[t]h>,- .sender's oriusBv-ihon 
nitotnuUioii \ \ r sotidct's address 5lVJllf ^l^Udi^iU'i^AP < eMfOOied honi ihc e-nunl nie;.s<iL'e <ind 
<!ii auioirKiUc leph (caHed a venficauun lequest) js cteated and sent " Mjob thai Itji wonld b;ne 
been ob\iOus to une Sot] ordmary ^kiU in liie art to send an e-mad in die Mmdar wav lo ihe 
adi 11 i ui stralorsU aol . com or any hasting authority administering the hosting along w itli [a] Ust as an 
attachment [as] disclosed by Leeds containing hosting authority and its associated respective 
network addresses that originate SPAM." 

Appellant respect&lly disagrees and again notes that merely maintaining a list of mail providers, as 
in Leeds, fails to specificaiiy disclose a "list containing tlie names and addresses of the spammers 
and their hosting ainhorities" (emphasis added), as noted by the Examiner. Fitnher, appeilant notes 
that, in Leeds, the list of mail providers is used in "a detettninadon oft as jimk e- 

mail or a valid message" {€xA. 4, lines 27-2S - emphasis added), and is not used to act as a report to 
be "transmitt[ed]., . to the identified hosting authority " (emphasis added), as claimed by appellant. 

.Additionally, appellant respectfully points out tliat, as admitted by the Bxaminer, Col. 3, lines 57-67 
of Leeds teaches that the "senders' origination information is extracted from the e-mail message and 
an automatic reply (called a verification request) is created and sent," such that a 'Verification 
response. , .is received in response to the verification request, [and] the sender is scored as to the 
probable characieristics, origination, validity, and desirabiliiy of the mail" (Col. .3, lines 60-6.5 ™ 
emphasis added). However, extracting a sender's origination information tiom an e-mail message 
for sending a verificatio n re quest , as in Leeds, does not even suggest "transmitting the generated 
report to the identitred hosting authority" (emphasis added), as claimed by appellant. Appellant 
respectfully asserts that the exceipts from Leeds relied on by the Examiner simply do not suggest 
"transmitting the generated report to the identified hosting authority " (emphasis added), as claimed 
by appellant. 

In view of the Examiner's argument that "[i]t would have been obvious to one [o.f3 ordinary skill in 
the art to send an e-mail in the similar way to the adnMnistra tor @aoi .com or any hosting authority' 
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admmjstering the hosting along with fa] list as an attachment [as] disclosed by Leeds containing 
hostnig authontv and iis associated tespecijve netwoik addiesties that ougmate SPAM" it seems the 
Examines has simpK dismis'ietl the same undei Official Notice (since no specific pnoj ait showing 
wa*- made) in lespon-ie appellant again points oiU the icmark*; abo\c that clearl\ show the mannci 
in nhich ^otne tii ^uch tlatms iuuher distinguish 1 cods Appellant thus {oimalK teque^T- a spet-dii. 
showing ol the subject niattei m \I L of the claims tn an\ fuiuie action Note cxceipi horn \IPI P 
below. 

"If the applicant traverses such an [Official Notice] assertion the examiner should cite a reference in 
support of his or her position." See MPEP 2144.03. 

Again, appellant respectfully asserts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group #i; Ciaim 4 

With respect to Claim 4, the Examiner has relied on Col, 4, lines 57-67; Col. 5, lines 1-8: and Col, 5, 
Imes 50-67 in Aronson to make a prior art showing of appellant's claimed technique 'Vherein 
identifying a URL comprises compadng text within the electronic message to a database of words to 
identify- the URL." 

After carefnl review of the excerpts relied on by the Examiner, appellant notes that the only VRL 
disclosed in Aronson relates to filtering e-mail based on "feature extraction & analysis 
(e.g., ...URL's,,,)" (see Col. 5, lines 63-64), However, Aronson does not teach how such URL is 
identified, whereas appellant specifically claims "identifying a URL [by] comparing text within the 
electronic message to a database of words to identify' the URL," as claimed. Appellant further notes 
that Aronson only teaches thai spam may be filtered "based on a specifi^c keyword search," and that 
therefore the keywords are used to identify spam, but not that a database of words is utilizied to 
"identify the URL" (emphasis added), in the manner claimed by appellant. 

In the Examiner's Answer dated 07/02/2007, it seems the Examiner has tailed to specifically 
respond to appellant's above arguments. Specifically, the Examiner lias only generally argued that 
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Aronson discloses "fiiter[ing| e-mail based on,.. feature extraction & analysis (e.g. based 
on...URI/s..,)" 



Hnwexer. ineft'!> discbsinii tluciiiu o-injil ImscJ on URLs, as in .Aronson, does not teach a 
lechiiiquc i'(n -"identifying a IRL" and pauicuUnh nol uliere "ujentifying a URL conipiisc^ 
couipafing text within the electronic message to a database of words to ideniify tiro URL" {emphasis 
added), as clairaed by appellant. 

Again, appellant respectfully asserts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group M: Claim 5 and 6 

With respect to Claim 5, the Kxaminer has. relied on Coi. 4, lines 57-67; t'oi 5, lines 1~S; and C^ol. 5, 
lines 50-67 in Aronson to make a prior art showmg of appeliatit's claimed "comparing the identified 
URL to a database of legitimate URLs," 

After careftil review of the excerpts relied on by the Examiner, appellant notes that Arotison merely 
discloses that "[ijf the network address contained in the source header is identified as the network 
address of a known spammer, a rate will be established to filter all incoming e-mail ftom this 
network address into the spam storage area 230" (Col, 4, lines 60-62 - emphasis added). Further, 
Aronson discloses that "[rifles 210 based on key wonj of spam e-mail may 

also be established" and '[fjor example, all e-mails containing the two words "sex" and "free" may 
be identified as spam and filtered ' (Col. 4, lines 2-5 - emphasis added). In addition, ,4ronson 
discloses that ''[o|ther contemplated rule bandlii^ Jllter modu! es wil I fil ter e-mai 1 based on: (1) 
word or letter frequency analysis; (2) IP source treqaency analysis ; (3) misspelHng analysis 
(unwanted e-mail often contains misspelled words); (4) word or letter combination analysis; (5) 
technical or legal RFC822 header compliance; and (6) featitre extraction & aitalysis (e.g., based on 
phone numbers, URL's, addresses, etc.)" (Col, 5, lines 58-64 - emphasis added). 

I lowever, appellant respectfully asserts that Aronson's disclosure of filtering e-mail as spam based 
on keywords, the somce address being identified as a known spammer, IP source frequency 
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analysis, and feature extraction and analysis, simply fails to even suggest ' 'cQmpariag the identilied 
URL to a database of jegitiniate URLs" (emphasis added), as claimed by appeilant. Cleady, 

fstfering based on a feature extraction and analysis of a llilL fails to suggest "comparing the 
identified URL to a. database of legitimate URLs " (emphasis added), as claimed by appellant. 

in the I virainef s Vnsvxci daiet! 0" 02 200" d)e 1^ vamnKt sUUc^ thai \iOii>on on col 1 line-. ^2-^ i 
di^ciostfs a MeM knov\[n] tecliniqte ot tdtenny the e-n\8d b\ compasmg n \sith the tiKhision iiM 
(! e bst or databa^*, of trusted addrc^seb) ' In addition, the fcxammer a«>serts tiiat col ^ bnef s] *^U- 
67 disclosf e] employing rule handling filter modules. . . to control SPAM," and that "RS(c) may be 
an inclusion list" (emphasis removed). The Examiner further notes that ""ah of tlie rule handling 
filter modules described herein may be combined or applied over a distributed ai-ray of filters 
throughout a network" (emphasis removed). 

Appellant respectfully disagrees and points out that Aronson merely discloses that some "known e~ 
fflail filtering tgchnicjtie^ are based upon an inc|A?sion jist , such that e-mail received from any source 
other than one listed in the inclusion list is discarded as junk" (Col. I, lines 52-55 - emphasis added). 
Additionally, Aronson teaches that a filter module "may be an inclusion list ." and that "[ojther... 
filter modules will filter e-inail based on. . . URL's ," (Col 5, lines 57-67 - emphasis added). 

However, merely disclo.sing a filtering tecliniq ue utilizing a e-mail source inclusion list , in addition 
to a general filtering technique based on URLs, does not specifically disclose "comparing die 
identifled URL to a database of le gitimate URLs" (emphasis added), as claimed by appellant. 

.Again, appeilant respectfuliy asserts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Gnmp U5: CJmm JO 

Witli respect to Claim 10, the Examiner has relied on Col, 3, lines 54-67; Col, 4, lines 1-23; Col. 4, 
lines 1-23 and 60-67; and Col. 5, lines 1-44; in Leeds to make a prior art showing of appellant's 
claimed technique **wherein identifying the hosting authority comprises identifying an Interact 
service provider." 
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AppeHant jespectfidlv ^isseiis that ihe exceq>is from I eeds lehed upon b> the pAaminei merely 
disclose ihat a ihsi le^ el check is to deteiniine if the aiieged <;ende{ identified by the "Fiom " oi 
"Rc pis-lo " fields are \alid icmpiiasis added) In addmoji Leeds dtscloses 'using the UNIX 
" whoiv, " Loninuiiui to Jc{einimc it d sue (ot bo-^U h\ {hat name jctualis t-Msit. (eniphasi-. added) 
CLaiU using k^Ivh-^ to perfoini a fusi le\ei check to euMue the host ai^tudih evists lot the .il'eged 
<;emlei uUUe Uom oi '1<epl> - 1 o ^ fields as m Leeds, lads to es en '^ugiie<;t a Technique xsheiem 
identifying tlic hosting aiuhont> compnses ideatifsing an inteinet ^eiMce ptoMdei (emphasis 
added), as claimed by appellam. Appellant respectfully asserts that merely ensuring that a host 
actually exists fails to specificaliy suggest "identifying an Interact service providei," in the manner 
as claimed by appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner asserts that 'it is evident that a "hosting 
authority" or a "authority hosting'' the i^etwoik address (i.e. email address) can in fact be the Internet 
sen-ice provider (ISP)/ and that "it is not possible to send e-mail or electronic mail without the 
presence of an Imemet Service Provider," The Exaniiner goes on to argue that in 'a Sl^AM mail 
coming from, SpaM^^y@;^^9l PQ^- - • "aol.com" signifies the identity of the hosting authority that 
supports/iiosts (i.e. maintains information in its serv'-ers that uniquely identifies the Spammer) the 
Spammer's address.' 

In addition, the Examiner states that "Leeds in particular discloses a melliod of reducing junk mail 
(SPAM) in which various filters are applied to the incoming mail to determine whether the sent 
mails is SPAM mail or not/' The l^xaminer then relies on C'ol. 3, lines 57-67 and Col. 4, lines 65-67 
from Leeds and asserts that "Leeds tnrther elaborates [on] the analysis process on Col 4, lines 65- 
67" 

.Appellant respecttiilly disagrees and notes that the above reference excerpts relied on by the 
Examiner merely teach tliat "[tjhe sender's origination information is extracted from the e-mail 
message and an automatic reply (called a verification request) is created and sent" (Col, 3, lines 59- 
61 - emphasis added). In addition, tlie excerpts teach that 4S94i493@iiotareaIaddress.com is 
broken domt into a user id (48941493) and a host name (notarealaddress.com) (Col. 4, lines 65-67 - 
emphasis added). Further still, appellant points out that, in Leeds, '[sjince Junk e-mails often come 
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from either non-MisteBt mers or iion-eMSfent sites or both, a first level check is to determme if the 
gtiggM seMgjjg] identified by the "From:" or "Reply-To." fields aie vajid ' and that '[tjhis first level 
check corresponds to issuing a verification request and can be in many forms, irscludiog. . . using the 
UNIX "whois" command to determine if a site (ox host) by that name actually exists ' (Col. 5, lines 
16-25 - emphasis added). 

However, merely extracting sender ori ginatiQn information, such as a host name, fi'om an e-mail 
message header , and using a UNIX "whois" command to detemiine if the host actuaiiy exists, does 
not specificaUy teach a technique "wherein identiMM fe h<^ comprises identifying 

an Internet service provider" (emphasis added), as claimed by appellant. Again, merely ensuring 
that a host actually exists feils to specificaliy suggest "identifying an Internet sei-vice provider " in 
the manner as claimed by appellant. 

Again, appeilant respectfuiiy asserts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Gnmp fl6: Ciaim 11 

With respect to Claim 1 1 , the Examiner has relied on Col. 4, lines 36-67; Col. 5, lines 1-44; and Col. 
8, lines 34-57 in Leeds to make a prior art showing of appellant's claimed "transmitting the report to 
a central managed service provider configured to forward tlie report to the identified hosting 
authority," 

.Appellant respectfully asserts that the only mention of any sort of report in snch excerpts from 
Leeds simply teaches that 'addresses could be watched for incoming junk e-mail and a notification 
from the authentication server could then be broadcast to users indicating that mail with the subject 
of "XYZ" is junk e-mail' (see, .specifically, CoL 8, lines 47-50). l lowever, snch notification sent to 
users does not meet appellant's claimed "transmitting tire report to a cenlral managed service 
provider configured to forward the report to the identified hosting authority" (emphasis added), as 
claimed by appellant. Clearly, sending a notification to users, as in Lt^ds, fails to meet 
"trmMmkimg the repOTt to a central managed (emphasis added), in the manner as 

claimed by appellant. 
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In the Examiner's Answer dated 07/02/2007, the Exammer argues that 'the list containing the names 
and addi-esses of the spamiYiers and their hosting authorities is tecimically a report, which can be sent 
(>! tiansmitted to rcbtcd aiithormcs for appropnate action " Further, the Examiner relies on Col ^, 
Inic^ and Col ! Iinc^ 6'=i-67 of I eed^ and uniher siatCN (hat "|ijt would ha\e been obx lOut. To 

one [t>n ouiu)ai\ skdl tn tUc an to send an c-nias^ m [a i smioai \s av to the adn-r«s»,i*oiij' aoKo^l 
ans hostinL' authoiitx adnunsstei inii die hooting alonu s\ith |a| hst as an attachmem [as] disclosed by 
Leeds containing hosting authority aiid its associated respective networi; addresses that originate 
SPAM." 

Appellant respectfully disagrees and again notes that merely maintaining a list of mail providers , as 
in Leeds, fails to specificaliy disclose a "list containitig the names atid addresses of the spammers 
and their hosting authorities" (emphasis added), as noted by the Examiner. Furtber, appellant notes 
that, in Leeds, the list of mail providers is used in "a deterniuiation o f thg.MaU>s.of.oiai| as jimk e- 
mai! or a valid message" (Col. 4, lines 27-28 - emphasis added), and is not used to act as a report to 
be "transinitt|ed]... to a central managed sen'ice provider configured to forward the report to the 
identifted hosting authority^ ' (emphasis added), as specifically claimed by appellant 

.Additionally, appellant respectfully points out tliat, as admitted by the Examiner, Col. 3, lines .57-67 
of Leeds teaches that the "senders' origination information is extracted from the e-mail message and 
an automatic reply (called a verification request) is created and sent," such that a 'Verification 
response... is received in response to the verification request, [and] the sender is scored as to the 
probable chai-acteristics, origination, validity, and desirability of the mail" (Col. 3, lines 60-6.5 ™ 
emphasis added). However, extracting a sender's origination information tiom an e-mail message 
for sending a vefiflcatioii request , as in Leeds, does not even suggest "transmitting the report to a 
central managed service provider configured to forv^^ard the report to the identified hosting 
authority" (emphasis added), as claimed by appellant. Appellant respectfnlly asserts that the 
excerpts from Leeds relied on by the Examiner simply do not suggest "transmitting the report to a 
centtal matiaged service provider configured to forward the report to the identified hosting 
authority " (emphasis added), as specifically claimed by appellant. 
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In view of the Exammer's argtmient that "[i]t woiiid have been obvious to one [of| ordinary sklli in 
the art. to send an e-mail in the similar way to the admiaigiatg^ or airy hosting authority 

administering the hosting along with [a] list as an attachment [as] disclosed by Leeds containing 
hi sting authoiitv and its as ocjated rcspecti\e netwoik addresses that ougmate SP \M ' it <!eeins the 
rvaninK! h<ts sinijiis (ii-,mi^ cd the ^ttiUL usuki Notko (-intc no -.petiiK piiiM ait ^hov^nig 

\\>.i>> iiMdc* In {ospon^c appelLml dyun ptnnis out iht tcnuiiks abo\i„ ih.iT cicaiK show the matiiKf 
in \\h\Lh some ol sich claims Uttiher di'^tttiuuish I eeds \ppc11aat thus Kumalh ut.iue'^t-. < spei-iiic 
h( Wing ot the subject matter m ALL of the clauns in a n futuie action Note exccipt t om MPbl 
cited above. 

Again, appellant respectfully asserts that at least tlie third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group ii-7: Claim 12 

With respect to Claim 1 2, the Examiner has relied on Col, 5, lines 38-44 in Leeds to make a prior art 
showing of appellant's claimed technique including "at least temporarily saving the report and 
tj:ansmitting the report to the identified hosting authority at the end of a specified period." 

Appeliant respectfully asserts that such excerpt only relates to "sending a verification 
message. . .witliin a period of time," Clearly, sending a verification message to determine if a user is 
actnally associated with the sender of e-mail does not meet appellant's claimed report, let alone 
"transmitting the report to the identi^^^^ at the end of a specified period" (emphasis 

added), as claimed by appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner alleges that "the list containing the 
names and addiesses of the spanimers and their hosting authorities is technically a report, which can 
be sent or transmitted to related autlrorittes for appropriate action." Further, the Examiner relies on 
Col 3, lines 57-67 and Col, 4, lines 65-^67 of Leeds and fiirther states that "[i]t would have been 
obvious to one |of| orciitjaiy skill in the art to send an e-mail in [a] similar way to the 
gdminjstrj^^^^ or any hosting authority administering the hosting along with [a] list as an 
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attachment [as] disclosed by Leeds containing hosting authority' and its associated respective 
network addresses that originate SPAM." 



\ppeliant tespoctfuiK di^agtec\ and again notes thai mcicK mamtawniii a hsi mail piostiici^ as 
m I ccdb imh to ^pccificalK di&clu^e a ' list ^onuuninsi the names and addicsscs of ihc spammcis 
and tbcij hosting atuhoiitjo^ ' {^eniphasis added) as noted by the fXannnei iMJuher, appellant noies 
that, in Leeds the hst of mad pto\ ideis js used m "a deternuna tion of the ~>taiiis of mad as psak e- 
mail or a \ aJid message" (CoL 4, Imcs 27-28 ~ emphasis added), and is not used to act as a report to 
be "transmitt[ed]... to the iden|ified..ho^^^ ^ at the end of a specified period" (emphasis 

added), as clairtied by appeilant. 

Additionally, appellant respectfidly points out that, as admitted by the Examiner, Col. 3, lines 57-67 
of Leeds teaches that the "senders' origination information is extracted from the e-mail message and 
an automatic reply (called a vetitlcaiion request ) is created and sent," sucl) that a "verification 
response... Is received in response to the verification request, [and] the sender is scored as to the 
probable characteristics, odgitiation, validity, and desirability of tiie mail" (Col 3, lines 60-65 - 
emphasis added). However, extracting a sender's origination information from an e-mail message 
for sending a venfication retjuest as in Leeds, does not even suggest '^transmitting the report to the 
identified hosting authority at the end of a specified period" (etnphasis added), as claimed by 
appellant. 

!n MOW of the Exammer's argimient that 't'lt "^vonld have been obxjous to one foil ordniarv skd! m 
the ait to --end an e mail m the smiiiar s.\a\ to tne a irtn i-t!<)tot <' .on- ot in\ hosung authont^ 
.idmuii^teunu the hnstm^i aioni: \Mth ai i^t <i;- an a.n^. imeni [as] distlosi.*.! hv i cuh containuig 
hostnm autho! Its and Its \s >v sated ^ ,k s ^. i i ok uid .^sos that onamatj sP \,\! it setuis the 
Fxaninici has smiplj dismissed the same undct Official Notice f since no specjtic pnor an s.ho\Aing 
was made). h\ response, appellant again points out the remarks above that clearly show the manner 
in which some of such claims fiuther distinguish Leeds. Appellant thus formally requests a specific 
showing of the subject matter in ALL of the claims in any future action. Note exceipt from MPEP 
cited above. 
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Again, appenant respectfuOy asserts that at least the third eiemem of the prima facie case of 
obviousness has not been met, as noted above. 

Group fiS: Claim 16 

With jespccr Jo ( ifuiu 16 tiic \ \asnniei has ichai on Col ^ Imes 54-67, { ol 4, lines 1-23 and OO- 
b'^. and ( ol ^ lutes 1-44 m Leeds to make a puoi ait showing of appellant's claimed technique 
*\s herein the hosting autliorit> is asi internet scr\ice proMdcr," 

Appellant respectfuny asserts that the excerpts from Leeds relied upon by the Examiner merely 

disclose that 'a fet..|eye , ) , check is to determiue if the alleged sender identijfied by the " From :" or 

" Reply-To :" fields are valid ' (etiiphasls added). In addition, Leeds discloses 'using the \JMX 
" whois " command to determine if a site (or host) bv that name actually exists ' (emphasis added). 
Cleatiy, using w!iois io perform a firsi level check to CTisure tlie host actnaUy exists for the alleged 
sender in the "From:"" or ''Reply-To:" fields, as in Leeds, fails to even suggest a technique 'Vherein 
the hosting authority is an Internet service provider" (emphasis added), as claimed by appellant. 

Appeilant respect&Uy asserts that merely ensuring that a host..8Cfaially exists fails to specifically 

suggest a "hosting authority [that] is an Internet service provider," as claimed by appellant. 

In tlie Examiner's Answer dated 07/02/2007, tire Examiner asserts tliat 'it is evident that a "hosting 
authority" or a "authority hosting" the network address (i.e. email address) can in fact be the Internet 
^enicc punuici (ISP)' and that "it is not possible to send e-maii oi electronic mail ^\^lhout the 
ptescnce of an Itut-tnet ^efvi^o Pfosider I ht i NiUnuieT goes on to aigye that m j SPV\1 mail 
coming lion\ V n uei a ao> con' ^aolcom signifies the identitv of the hosung auihuttts thai 
suppoits \ o^K u V maintains information in its servers that imiquely identities the Spammer) the 
Spammer s address. 

In addition, tlie Examiner states that "Leeds in particular discloses a method of reducing junk mail 
(SPAM) in which various filters are applied to the incoming mail to determine whether the sent 
mails is SPAM mail or not." The Examiner then relies on Col, 3, lines 57-67; Col. 4, lines 65-67; 
and Col 5, lines 13-33 trom Leeds and asserts that "Leeds clearly discloses identifying the hosting 
authority that is hosting tlie network address," 
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Appellant respecifully disagrees a«d notes that die above reterence excerpts relied on by the 
Examiner merely teach that "[t]iie sender's origination tnfofmation is extracted from tlie e-mail 
message and an aiitomata loph icailod a xeiification request) is created and sent" (Col 3, lines 59- 
(>i ~ cmphasi- aJdcJ) hi 'iddr\M^ ilic e\coip(s leach thjt !H"4U03 fMioUnedladdtess torn is 
broken dow ii uuo a u^ci id (4^^^)4!4'^>^ and a ho\i iumc i noun caLukb ess con?) (Col 4 hnco ^n~(t7 
emphasis added). Further stiil the exceipts teach that 'jsiuice imk e-matls often come fiom eithei 
non-existent users or noa-existent sites or both, a first les'e! check is to dctermuic if the alleged 
sender|s] identified by the "From;" or "Reply-To;** fields arevalid' and that '[tjhis ftt-st level check 
corresponds to issuing a verification request and can be in many forms, inchiding. using the UNIX 
"whois" comi-nand to deteMiM. , lllJ|te (or host) by tliat name actua||y.exi.sts ' (Col. 5, lines 16-25 ■- 
emphasis added). 

However, mereiy extracting sender origination intbnnatign, such as a host name, fioni an e-niail 
jfggssage header , and using a UNIX "whois" command to deteimine if the host actually exists, does 
not specifically teach a technique "wherein the hosting authority is an Internet service providef ' 
(emphasis added), as claimed by appellant 

.Again, appellant respectfully asserts that at least tlie third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group U9: daim 19 

With respect to Claim 19, the E.xaminei- lias relied on Col. 4, lines 36-67; Col, 5, lines 1-44; and Col. 
8, lines 34-57 in Leeds to make prior art showing of appellant's claimed technique "wherein the 
processor is contrgured to transmit the repoit to a central managed service provider." 

Appellant respectfully asserts that the only mention of any sort of report in such exceq^ts from 
Leeds simply teaches that 'addresses could be watched for incoming junk e-mail and a notification 
from tlie authentication ser\'er could then be broadcast to users indicating that mail with the subject 
of "XYZ" is junk e-maiF (see, specifically. Col. 8, lines 47-50). J-low^ever, such notification sent to 
users does not meet appellant's claimed "transmit[ting] the report to a central managed sendee 
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provider " (emphasis added), as claimed by appeilaiit. Clearly, sending a notification to users, as in 
Leeds, fails to meet "MliMQillM»il report to a ceiilral tmmged (emphasis 
added), in the manner as claimed by appellant. 

in the rvtminei s Aiibuer dated 0"' 02 20'r t ^ " \ » » lji rfi.LLic^ \hM the htii tontatniiu {Ik 
nau!v.s and .lddiesst.'^ <n the -i{xu7ui)er\ and then i n_. .juiiurntos )s ti^chnn.al!v a tepou whuh v.an 
be ^cDt Oi transmitted to seiated authonue'? foi appiopimte action i unhei the \ vtnnnef lelie^ on 
Col J, imci 5'^-67 and Col 4 hnes 65-67 of Leeds and tlirther -states that fi|t would ba\c been 
obvious to one [of| ordinary skill m the art to send an e-mail in [a] simdar way to the 
adrnn {SLTaK>j;{KH>l com oi any hosting authoiuy admmisteimg the hostmg along with [aj hst as an 
attachment [as] disclosed by Leeds containing hosting authority and hs associated respective 
network addresses that originate SPAM." 

Appellant respectfully disagrees and again notes that merely maintaining a list of ntaii providers , as 
in Leeds, fails to specifically disclose a 'list containing the names and addresses of the spammers 
atid their hosting authorities" (emphasis added), as noted by tlie Exatiiiner. Further, appellant notes 
that, in Leeds, the list of mail providers is used in "a determination of the status of mail as junk e- 
mail or a valid message" (Col 4, lines 27-28 - emphasis added), and is not used to act as a report to 
be "transimtt[ed"J... to a central managed service provider " (emphasis added), as claimed by 
appellant. 

.Additionally, appellant respectfully points out that, as admitted by the Examiner, Col 3, lines 57-67 
of Leeds teaches that the "senders' origination informadon is extracted from the e-mail mes.sage and 
an automatic reply (called a verificatsot^ request ) is created and sent^ such that a "verification 
response... is received in response to the verification request, [and] the sender is scored as to the 
probable characteristics, origination, validity, and desirability of the mail" (Col 3, lines 60-6.5 ~ 
emphasis added). However, extracting a sender's origination information from an e-mail message 
for sending a verification request , as in Leeds, does not even mggest a technique "wherein the 
processor is configured to transmit the report to a central managed service provide/ ' (emphasis 
added), as claimed by appeiiam. 
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In view of the Exammer's argtmient that "[i]t woiiid have been obvious to one [of| ordinary sklli in 
the art. to send an e-mail in the similar way to the admiaigiatg^ or airy hosting authority 

administering the hosting along with [a] list as an attachment [as] disclosed by Leeds containing 
hi sting authoiitv and its as ocjated rcspecti\e netwoik addresses that ougmate SP \M ' it <!eeins the 
rvaninK! h<ts sinijiis (ii-,mi^ cd the ^ttiUL usuki Notko (-intc no -.petiiK piiiM ait ^hov^nig 

\\>.i>> iiMdc* In {ospon^c appelLml dyun ptnnis out iht tcnuiiks abo\i„ ih.iT cicaiK show the matiiKf 
in \\h\Lh some ol sich claims Uttiher di'^tttiuuish I eeds \ppc11aat thus Kumalh ut.iue'^t-. < spei-iiic 
h( Wing ot the subject matter m ALL of the clauns in a n futuie action Note exccipt t om MPbl 
cited above. 

Again, appellant respectfully asserts that at least tlie third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group UIO: Claim 20 

Witit respect to Claim 20, the Examiner has relied on Col. 4, lines 57-67; Col 5, lines 1-8; and Col 
5, lines 50-67 in Aronson to make a prior art showing of appellant's claimed "database containing 
seaich terms used to identify the network address within text of the electronic message." 

After careftil review of the excerpts relied on by the Examiner, appellant notes that Aronson merely 
discloses that "[i]f the network ad dress contained in the source header is identified as the network 
address of a known spammer, a rule will be established to fflter aH. incoming. e-mai from this 
network address into the j^tnu sto 230" (Col. 4, lines 60-62 emphasis added). Further, 

Aronsoii discloses that "[rjuies 210 based on keywords in the siibject or body of spam e-mail may 
also be established'' and '[tlor example, all e-mails containing the two words "sex" and "free" may 
be identified as spam and filtered ' (CoL 4, lines 2-5 ~ emphasis added). In addition, Aronson 
discloses that "[ojther contemplated nde handling filter modules will filter e-mail based on: (1) 
word or letter frequency analysis; (2) IP source frequency analysts: (3) misspelling analysis 
(unwanted e-mail often contains misspelled words); (4) word or letter combination analysis; (5) 
technical or legal RFC822 header compliance; and (6) feMure extrMtiQn & aMl^^^ (e.g., based on 
phone mmibers, UELls^ addregg^^^ ^ etc.)" (Col. 5, lines 58-64 - emphasis added). 



However, Aronson's mere disclosme that the network address contained within the source header is 
used by a rule to filler e-mati froni this network address to a spam storage area simply fails to even 
suggest that "a database comainiiig search tenns [is] used to identi^- the network address within text 
of the electronic message" (emphasis added), in the manner claimed by appellant. Further, 
disclosing ulontih'niii and ftitcttuij: •s]\im based on kc\x\oid- m the ^luhjetf O! bod\, as m AuMisnn, 
iads tt> sUL'gi.'j.r that ' a database conUtniiaiiL seasci) term.s [isj used to ulcnTd\ the nctwtnk addicts 
uithin text of ihe clectuinn, message' (emphasi's added K as claimed b\ appellant In addition, 
A^rcnsons dtfeciosure tiiat ruic handling fdter modules wdl titter e-mad based on IP source 
frequency analysis, and feature extniction & analysis simply fails to suggest that ""a database 
cotUaining search terms [is] used to identify the network address within text of the electronic 
message" (emphasis added), as claimed by appellant. Clearly, identifying and filtering spam based 
on keywords and features, as in Aronson, fails to meet "a database containing search terms used to 
identify the iietwork address '' (eniphasis added), in the manner as claimed by appellant. 

hi the E.Kainjner's .Answer dated 07/02/2007, the Examiner states that "Arotison on coi.i, iines 52- 
55 discloses a well know[n] technique of fdtering the e-mail by comparing k with the "inclusion 
list" (i.e. list or database of trusted addresses)," In addition, the Examiner asserts that "col5.,, 
line[s] 50-67 disclos[e] employing rule handling fdter modules. . . to control SPAM" and that "RS(c) 
may be an inclusion list" (emphasis removed). 'Flie Examiner ftirther notes that "ail of the rule 
handling filter modules described herein may be combined or applied over a distributed array of 
filters througliout a network" (emphasis removed). Further still, the Examiner relies on Col. 6, lines 
47-52 of Aronson as "fiirther el8borat[ing on] one of the ndes." 

■Appeliatit respectfully disagrees and points out that Aronson merely discloses that some "known e- 
mail filtering techniques are based upon an inclusion list , such that e-mail received from any source 
other than one listed in the inclusion list is discarded as junk" (Cofi, lines 52-55 ~ emphasis added). 
.Additionally, Aronson teaches that a filter module "may be an inclusion list' - and that "[ojther... 
filter modules will filter e-mail based on... addiesses/' and aJso diat "all of the rule handling filter 
modules described herein may be combined" (Col, 5, lines 57-67 - emphasis added). Furthermore, 
Aronson discloses that 'a rule which is geared towards screening e-mail j^^ ^ containing sexual 
content... which filters e-mail based on the keywords "sex" and "free" may be given a weight value 
of 10 on a scale from i to 10' (Col. 6, lines 47-51 -- emphasis added). 
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Howevei, meiely di!»cIo;>ing a filtering techiuque utih/mg a e-majj sourc^^^ list, in addition 

to a general filtering tucbr .]>!o >^ .uklresses, does not teach "a database containing seaioh 

tems mcd to idemifv ihc '-eto-osk ^i.-diOs- ^ithtn text of the electriwtc mossajje"^ (omphaMs .iddcd) 
i\b ci<tin5ed bv ftppLllant Nfote spcctfa\dh, illfaing c-nifiil bd--ed un kL\\\otds, as in Atun^on iads 
to meet <:i dai<-ib<-ise contaniing atviich leim-, used to tdentify the »ca\ oik tuiJics^ {emphasis kidded), 
m the manner as claimed by appellant. 

Again, appellant respectfuliy asserts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Groifp fill: Claim 21 

With respect to Claim 2L the Kxaminer has relied on C'ol. 4, lines Sl-i^l; Col. 5, lines 1-8; and Col. 
5, tines 50-67 in AroBSon to make a prior art siiowitig of appellant's claimed "database containitig a 
list of trusted network addresses." 

After care&l review of the excerpts relied on by the Examiner, appellant notes that Arotison merely 
discloses that "[ijf the network address contained in the source header is identified as the network 
address of a known spammer, a rate will be established to filter all incoming e-mail ftom this 
network address into the spam storage area 230" (Col 4, lines 60-62 - emphasis added). However, 
appellant respectfolly asserts that Aronson's disctosnre of filtering e-mail as spam based on the 
source address being identified as a known spammer simply feils to even suggest " a database 
containing a list of trusted network addresses '" (emphasis added), as claimed by appellant. Clearly, 
a source address of a known spamTOes: ., as in Aronson, simply fails to suggest "a list of trusted 
network addresses" (emphasis added), in the manner as claimed by appellant. 

In tlte Examiner's Answer dated 07./02./2007, the Examiner states tltat "Aronson on coiJ, lines 52- 
55 discloses a well know[n] technique of filtering the e-mail by comparing it with the ''inclusion 
lisf (i.e. list or database of trusted addresses)," In addition, the Examiner asserts that "col,5.., 
line[s] 50-67 disclos[e] employing rule handling filter modules. . . to control SPAM" and that "RS(c) 
may be an inclusion list" (emphasis removed). Hie Examiner ftjrther notes that "all of dlie rule 

-22- 



handling filter modules described herein may be combined or applied over a distributed array of 
filters throughout a network" (emphasis removed). 

Appeliant tcspcctfulK- di-^atiiecs and points out that Aronson merely discloses that some ''knoxMi e- 
n?a5i ftUciinu ic'chiiiqucs ;uc based upon an inclusion list . <uch \hM e-mail icccned from an\ stunce 
othor ihan one iij-ied in tiic tnchision list is discaidcd as lunk" {dA i hnes S2~55 cmphasft, added}. 
Additjooalh. Aronson teaches that a filter module "ma\ be an inchi^ion hit ." that "lojthei, fiker 
modules will ftker e-mad based on.,, addresses. " and also that ''all of the ailc handbng fdtcr 
modules described herein maybe combined" (Col 5, lines 57-67 - emphasis added), 

Bowever, merely disclosing a filtentig technique utilizing a e-mail soMce inclu^ ^ ^ ^ in addition 
to a general filtering techniqiie based on addresses, does not teach "a database containing a list of 
trusted net work addresses" (emphasis added), as claimed by appellant. 

Again, appellant respectfully as.serts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group lfJ2: Claims 22 and 23 

With respect to independent Ciaim 22, the Examiner has reUed on Col. 4, lines 51-56; Col. 5, lines 
50-67; and tlie Abstract in Aronson along with Col 3, lines 54-67; and Col. 4, lines 1-35 in Leeds to 
make a prior art showng of appellant's claimed "code that identifies an authority' hosting the 
network address." 

Appellant respectlitlly asserts that the excerpts from Leeds relied on by the Exanriner only relate to a 
host computer associated with a sender of ati electronic mail message (see Abstract and Col. 4, lines 
66-67, specifically). In addition, Leeds discloses that "if a message has purportedly been relayed 
through a machine named maiLfiomnowhere.com and the mail handling system has determined that 
such a machine does not actually exist, the confidence rating for the message should be increased," 
Clearly, determining a host computer/host name of a sender of e-mail or relay, as in Leeds, does not 
meet appellant's specific claim language, namely an " authority hosting the network address " 
(emphasis added), as claimed by appetlant 



Further, appellant lespectfuHy asserts that the excerpts from Aronson relied upon by the Examiner 
merely disclose that "fojther contemplated iv\ " > w -\ \U fikei e-ni3ti based otr 

({) word or letter frequencN anaKsis, (2) h' so.> .0 hc-|viv'K\ a a ti) nus^peilsng anaU^is 
(unwanted c~maii often conUnns nnsspoLLd Wiiidsi {h uoui o\ lettei v.omb!naU(in <ni<)i>s!>,, i^} 
technical 01 iega! [ir(\S22 iic.uici c<nnpl!<tnv.e jnts (n) fcrftiac c\iTat.tton & anah^i-.i (e g . ha^ed on 
phone num b ers, i Rl S addies^es eic y i emphasis added) deads fihenng ^.-inaii based on IP 
source frequency and feature extraction & ana!\sjs fails to e\eR suggest "idcntitvfs mg] an authont> 
hosting fee„iMEl!>lllj;,,,Mfess" (emphasis added), as claimed by appellant. 

in addition^ the Examiner argued that "Arfpjnson disclosed that the source header data from an 
incoming e-mail address { aardvark@aol .mni) is analyzed by the spam probes." Further, the 
Examiner argued that '[t]he source header data includes the !SP (in this case "aol") hosting the 
spammer's network address (see col. 4, lines 45-67).' Appellant disagrees and respectfully asserts 
that the excerpt from Aronson simply discloses that "[a] spam probe is an e-mail address selected to 
make its way onto as many spam mailing lists as possible." Aronson continues, teaching that "[i]t is 
also selected to appear high up on spammers' lists in order to receive spam mailings early in the 
mailing process" using an e-mail address such as " aardvark@aoi.com ." Clearly, the mere 
disclosure of using an e-mail address in a spam probe, as in Aronson, completely fails to even 
suggest "identify[yiag] an authority hosting the„network„ad^^^ (emphasis added), as claimed by 
appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner asserts that 'it is evideiJt that a "hosting 
authority" or a "authority hosting" the network address (i.e. email address) can in fact be the Internet 
service provider (ISP)' and that "st is not possible to send e-mail or electronic mail without the 
presence of an Internet Service Provider." The Examiner goes on to allege that in 'a SPAM mail 
corning from, Spammer@ao!.co.m. .. "aol.com" sigtufies the identity of the hosting authority that 
supports/hosts (i.e. maintains information in its servers tiiat uniquely identifies tlie Spammer) the 
Spatnmer's address,' 

In addition, the Examiner states that "I-eeds in particular discloses a method of reducing junk mail 
(SPAM) in which various filters are applied to the incoming mail to determine whether the sent 



mails is SPAM mail or not." The Examiner then relies on Cot 3, lines 57-67; Co!. 4, lines 65-67; 
and Col 5, lines 13-33 from Leeds and asserts that "Leeds cleariy discloses identitying tlie hosting 
authority that is hosting the network address." 

A^ppeliant tespcxtiuiK disagice^ .uxi niUt.^ 1 , ' k s ^ ^ j reit.ictKe e\<,er|ns tciit.d i>n b\ {Ik 
E \<!minei mciois teach that [ijhe \endet s jk\uu i uiormrfUon is evtujcied Uom the e-nmii 
mes<;<iytf and an automatit. tepls icaOed a v,etincauon leipte'^i) i-; cieaied and seui {( ol ^ Imes 59- 
6i ~ cmphatsi-^ added) in addition, the exccrpt<« teach that 4yy4l493^tnotarealaddiesscom is 
brokeTi dcnvj^ mto a user id {48941493) and a ho$t , .name (notarealaddress.com) (Col. 4, Inies 65-67 - 
emphasis added). Further still, the excetpts teach that '[sjince junk e-mails often come from either 

npn-exktent users or noflhexistetit or both, a first level check is to det^mine if the alle ged 

settder[ s] identified by the "From:" or "Reply-To:" fields are valid ' and that '[tjhis first level check 
corresponds to issuing a verification request and can be in many forms, including. . . using the UNIX 
"whois" coramand to deMroilne if a site (or host) by that name acUialjy exists ' (Col, 5, lines 16-25 - 
emphasis added). 

However, merely extracting sender ori gination information , such as a host name, from an e-mail 
message header , and using a UNIX 'Svhois" command to determine if the host actually exists, as in 
Leeds, does not teach "code that identifies an authority hosting the «,etwor,i!f,,,MflM^'' (emphasis 
added), as claimed by appellant. 

Stil! with respect to independent Claim 22, the Examiner has again relied on the Abstract; Col. 3, 
lines 54-67; and Col 4, lines 1-35 in Leeds to make a prior art showing of appellant's claimed "code 
that generates a report containing the identified network address;' 

Appellant respecttnlly asserts that the only suggestion of a "report" in the excerpts relied on by the 
Examiner merely relates to "seed addresses [which] can alert an e-tnail provider to potential mass 
mailings by reporting when mail is received for ghost or non-existent accounts." Cleariy, alerting an 
e-maii provider when an e-mail is received for a seed address, as in Leeds, fails to even suggest 
"generat[ingj a report containing tlie identified network address" (emphasis added), as claimed by 
appellant. 



Further, the Exammer argued that "Leeds also tiescnbes the similat process of identifying the host 
name of the i»pammer'b addiess <p!ease see col 4, imes & col.5, imes 1-45)." Appellant 

disagrees and jespectfully asserf? {hat I^eeds sunply discloses that '[tjhe fields fot "Return Path 
"From " and "Replv-To " are highlighted as three of the fields which the piesent in\ention will 
parse horn the mcssume he.uiei A.s an evjmplc, 1 eeds ie<Khes {h.u ffoni 

4<;04j4v; g iiotaioaiadJic-^s <.iim is btokcn down mio a usei id {4f>'^m4^'^^) dnd hos{ n<inie 
( nutatealaddicbs com } (empha'^i^ added) Leeds continues disclo'^ing that a tu^T lt;\i,l i-lieck is 
"used] to dcteminic if the alleged sender identified b> the "From " or "Replv-lo " fields aic \ahd 
Moreover, Leeds discloses that the first level check 'iiiclud[esl: (I) sending.a..messa , ge to the user 
identified by tlie "From:" or "Reply-To:" fields and examining whether the message can be 
successfully delivered, (2) using the UNIX " whois " command to determine if a site (or host) by that 
name actually exists, (3) using the UNIX "fra ger " conunand to identify if a user name exists at a 
verifiable host, (4) using the " vrtv " command when connected to a sendmail daemon to verify that a 
user exists at a particular site, and (5) using the UNIX " Iraceroute " command to make sure there is a 
valid route back to the specrfied host' (emphasis added). Clearly, performing a first level check 
including using whois, and traceroute to verify the host name from the "From:" and "Reply- To:" 

fields, as in Leeds, fails to even suggest "generat[ing] a re ^ )ort containing the identified ttetwork 

address" (emphasis added), as claimed by appellant. 

In the Examiner's Answer dated 07,^2/2007, the Examiner failed to respond to appellant's 
arguments with respect to appellant's claimed "code that generates a report containing the identified 
network address." Thus, a notice of allowance or specific prior art showing of each of tite foregoing 
claim eletnents, in combination with the remaining claimed features, is respectfully requested. 

Further, with respect to independent Claim 22, the Exanruier has relied on Col 4, lines 60-67; Col, 
5, lines 1-44; and Col. 6, lines 52-65 in Leeds to make a prior art showing of appellant's claimed 
technique 'Svherein identifyitig the hosting authority comprises identifying an owner of a network 
domain." 

Appellant respectfiilly asserts that the excerpts from Leeds relied upon by the Examiner merely 
disclose 'a firM kYgLgijggk i,s to deteitnine if the alleged sender identified by the " From :" or "Regly:: 
To;" fields are valid* (emphasis added). In addition, Leeds discloses 'usmg the UNIX "whois" 



command to determine if a siMiOT jiost).]^ (emphasis added), Ciearly, 

using whois to perfomi a fust level check to ensiife the liost actually exists for the alleged sender in 

the "FTom:" or "F<eply-"ro:"' fields, as in Leeds, fails to even suggest a technique "whereio 
identttymg the hosting authority comprises identifying an owner of a neiwork dofflain " (emphasis 
added), as claimed by appellasit. Appellant respectfully asserts that merely ensuring that a host 
actually exists fails to even suggest ''identifying an owner of a network domain," as claimed by 
appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner failed to respond to appellant's 
a5:gumeTrts with respect to appellant's claimed technique "wherein identifying the hosting authority 
comprises identifying an owner of a network domain." Thus, a notice of al lowance or spedtic prior 
art showing of each of the foregoing claim elements, in conotbmation with the remaining claitned 

features, is respectiuliy requested. 

Again, appellant respectfully asserts that at least the third element of die prima fticie case of 
obviousness has not been met, as noted above. 

Group Claim 25 

With respect to Claim 25, the Examiner has relied on Col. 4, lines 57-67; Col 5, lines 1-8; and Col 
5, lines 50-67 in Aronson to make a prior art showing of appellant's claimed "code that compares 
text within the electronic message to a database of words to locate the network address within the 
text." 

After careful review of the excerpts relied on by the Examiner, appellant notes that Aronson merely 
discloses that "[i|f the network address contained in the source header is identified as the network 
address of a known spammer, a rule will be established to filter all incoming e-mail from this 
netw^ork address into tlie spam storage area 230" (Col. 4, lines 60-62 -■ empltasis added). Fuither, 
Aronson discloses that "[I'l^l^s 210 based on keywords in the snbject or body of spam e-mail may 
also be established" and *[flor example, all e-mails containing the two words "sex" and "free" may 
be ideMiliM jg JggM (CoL 4, lines 2-5 ™ emphasis added). In addition, Aronson 

discloses that "[oJtfee^r contemplated rule hatidling filter modules will filter e-mail based on; (1) 



word or letter frequency mialysis; (2) IP...Murce. fi-eQugTic^^ (3) niisspeiling analysis 

(unwanted e-mai! often contains inisspeHed words); (4) word or letter combination analysis; (5) 
technical or legal RFC822 header compliance; and (6) feature extraction & analysis (e.g., based on 
phone numbers, URL's, addresses , etc.)" (Col, 5, lines 58-64 -- emphasis added). 

l:•^o\ve^■e^■, the niert- disclosure ihat the network address contained within the source header is used 
by a rule to filler e-mail from this network address to a spam storage area, as in Aronson, snnpiy 
fails to even suggest ''code that compares text within the electronic message to a databa.se of words 
to locate the network„adfess ^ (emphasis added), in the manner claimed by appellant. 

Further, Aronson's disclosure to identify and filter spam based on keywords in the subject or body 
fails to suggest "code that compares text within the electronic message to a database of words to 
locate the network address within the text" (emphasis added), as claimed by appellant. In addition, 
Aronson's disclosure tJiat rule handling filter modules will filter e-mail based on IP source 
irequency analysis, and feature extraction & analysis simply fails to suggest "code thai compares 
text within the electronic message to a database of words to k>cate the network ad dress wilhiii the 
text " (emphasis added), as claimed by appellant. Clearly, identifying and filtering spam based on 
keywords and features, as in Aronson, fails to meet "a database of words to locate the network 
address within the text " (emphasis added), in the manner as claimed by appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner states that "Aronson on col-1, lines 52- 
55 discloses a well know[nj technique of filtering the e-mail by comparing it with the "inclusion 
list" (i.e. list or database of tmsted addresses)." In addition, the Examiner asserts that "col.5... 
line[s] 50-67 disclos[e'J employing rule handling filter modules... to control SPAM" and that "RS(c) 
t^nay be an inclusion list" (emphasis removed), lire Examiner further notes that "ail of the mte 
handling filter modules described herein may be combined or applied over a distabuted array of 
filters throughout a network" (emphasis removed). 

Appellant respectfully disagrees and points out that Aronson merely discloses diat some "known e- 
mail filtering techniques are based upon an inckision list, such that e-mail received from any source 
otlier than one Ksted.jn tiMinclusion.^^^ is discarded as junk" (Coll, lines 52-55 - emphasis added). 
Additionally, .Aronson teaches that a filter module "may be an inchjsionJiM" that "[ojtber... 



fitter modules will fite e-mml teed o^^^ and also that "all of the rule handling filter 

modules described herein may be comhiiied" (Coi. 5, Hiies 57-67 emphasis added). 

Howe\ci meit'lv distlosniu a v ui' tccnis quo - / !>■ a c- ir-J ^(\iuc .sulu- .on usi m -addition 
to <i geneial fiitcnnij; technique Kised on addto^-^o^ Joe- jv; LOrfch a iecliiiu|ut.' "t(» locate the ncfwotk 
rfddjcss within the text" as churned, let alune spceifiedily that 'code eonipaies text -wnhm the 
electiODiC mepsaee fo a tlatabase of words to locate the ^^^ n^ ^ text" ^emphasis 

added), as claimed by appellant 

Again, appellant respectfuUy asserts that at least the third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group if 14: Claim 26 

With respect to CHaim 26, the Examiner ha^s relied on Col. 4, lines 57-67; C'oL 5, lines i-8; aod Col. 
5, lilies 50-67 in Aronson to make a prior art showing of appellant's ciaiined "code that compares 
tlie identified network address with trusted network addresses." 

After careful review of the excerpts relied on by the Examiner, appellant notes that Aronson merely 
discloses that "[ijf tiie network address contained in the source header is identified as the network 
address of a known spammer, a rule will be established to filter ail incoming e-mail from this 
network address into. the spani storag e area 230" (Col. 4, lines 60-62 ~ emphasis added), 

{:k>\\e\ei appellant te^pecifoih a?^eii^ thai Xum^or s diScioMue of fihenni.* c-maii .^-^ ^pani b^^^ed 
on the MHifCt' addic-^s bcui.., iJc u a'i a known spasiVsrcE simpK tails tu >,\en 'ug^icst 'vxsde iXui 
conipares the idcntilied netwoik address with trusted nemotk addi esses " (emphasis added), as 
claimed by appellant. C^^learly, tlie source address of a known spammer , as in .Aronson, simply tails 
to suggest "tntsted network addresses" (emphasis added), in the manner as claimed by appellant. 

In the E.xaininer's Answer dated 07/02/2007, the Examiner states that "Aronson on col. l, lines 52- 
55 discloses a well know[n] technique of fihering the e-mail by comparing it with the "inclnsion 
list" (i.e. list or database of trusted addresses)," In addition, the Examiner asserts that "'coLS... 



]ine[s] 50-67 disclos[e] employmg ruie handlmg filter modules, . . to control SPAM" and that ''RS(c) 
may be an inclusion list" (eniphasis removed). The Examiner fmtlier notes tliat "all of the rule 
handling filter modules described herein niay be combined or applied over a distributed array of 
filters throughout a network" (emphasis removed). 

\ppolKiiit iospcciiulh dnayree^ and pomts oiU tlwt \ionsoa meicb diM^kises ihat ^omc Immn c~ 
inasl iiltenng technHjue-^ aic ba^ed upon an mclusion iist '^uch that e-mail rei.eised from jnv soutce 
other than one listed m the mckision h^t is discarded as \VinW {Coi i. hncs 52-.'^ ~ emphasis added) 
Additionally, Aronson teaches that a filter module "may be an mckision Itsf " and that 'tt>1t^«^'' 
filter modules will filter e-mail based on... addresses. " and also that: "all of the rule handling filter 
modules described herein may be combined" (Col 5, lines 57-67 - emphasis added). 

However, merely disclosing a filterin g techniq ue utilizing a e-mail source inclusion list in addition 
to a general filtering.tedMiijque based on addresses, does not teach ''code that compares the identified 
network address witjiMgMd tjgtw^^^^^ (emphasis added), as claimed by appeibm. 

Again, appellant respectfully asserts that at least the third element of die prima facie case of 
obviousness has not been met, as noted above. 

Group mS: Clam 29 

With respect to Claim 29, die Examiner has relied on Col, 4, lines 37-67; and Col. 5, lines 1-44 in 

Leeds to make a prior art showing of appellant's claimed technique "wherein the report is udlized to 

generate an electronic maii message to be sent to the identified organization." 

Appellant respectlliUy assens that Leeds merely discloses "automadcally sending a reply (in the 
ibnn of a verification request) to the purported sender fsV {QoX. 4, lines 38-40 - emphasis added). 
Further, Leeds discloses 'Issuing a verification request and can be in many forms, including: (1) 
sending a message to the user identified by tlie "From:" or "Reply-To;" fields and examining 
whether the message can be successfully delivered' (Col. 5, lines 20-23 ~ emphasis added). 
I-Jowevei; such vedfication request message sent to users fails to meet a technique "wherein the 
report is urilized to generate an electronic mail message to be sent to the identified organization" 
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(emphasis added), as claimed by appellant. Clearly, sending a verification message to the piir poited 
senders, as in Leeds, fails to meet ''an electronic mail message to be sent to the ideMtjed 
organizatton" (emphasis added), in the manner as claimed by appellant. 

in the rvtminei s Aiibuer dated 0"' 02 20'r t ^ " \ » » lji rfi.LLic^ \hM the htii tontatnisu {Ik 
nau!v.s and .lUdiesst.'^ <n the -ip.u7uner\ and then i n_. .juiiurntos )s ti^chnn,al!v a tepou whuh v.an 
be ^cDt Oi transmitted to seiated authonue'? foi appiopimte action i unhei the \ vtunnef lehe^ on 
Col J, imci 5'^-67 and Col 4 hnes 65-67 of Leeds and tlirther -states that fi|t would ba\c been 
obvions to one [of| ordmary skill m the art to send an e-mail m [a] similar way to the 
adrtm ssLTatoii^Ktol com oi any hosting anthoiity admmisteinig the hosting along with [aj hst as an 
attachment [as] disclosed by Leeds containing hosting authority and hs associated respective 
network addresses that originate SPAM." 

Appellant tespeclfuily disagrees and again notes that merely maintaining a list of maii providers , as 
in Leeds, fails to specifically disclose a 'list containing the names and addresses of the spammers 
and their hosting authorities" (emphasis added), as noted by tlie Examiner. Further, appellant notes 
that, in Leeds, the list of mail providers is used in "a determination of the status of mail as junk e- 
mail or a vaUd message" (Col. 4, lines 27-28 - emphasis added), and is not tised to act as a report 
'"ntilized to generate an electronic mail tnessage to be sent to the identified organisaation" (emphasis 
added), as claimed by appellant. 

.Additionally, appellant respectfully points out that, as admitted by the Examiner, Col 3, lines 57-67 
of Leeds teaches that the "senders' origination informadon is extracted iioni the e-mail message and 
an automatic reply (called a verificatiot^ request ) is created and sent^ such that a "verification 
response,,.is received in response to the verification request, [and] the sender is scored as to the 
probable characteristics, origination, validity, and desirability of the mail" (Col 3, lines 60-6.5 ~ 
emphasis added). However, exttacting a sender's origination inforniation from an e-mail message 
for sending a verification request , as in Leeds, does not even suggest a teclmique "wherein tiie report 
is utilized to generate an electronic mail message to be sent to the identified orgatiization" (emphasis 
added), as claimed by appeiiant. 
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In view of the Exammer's argtmient that "[i]t woiiid have been obvious to one [of| ordinary sklli in 
the art. to send an e-mail in the similar way to the admiaigiatg^ or airy hosting authority 

administering the hosting along with [a] list as an attachment [as] disclosed by Leeds containing 
hi sting authoiitv and its as ocjated rcspecti\e netwoik addresses that ougmate SP \M ' it <!eeins the 
rvaninK! h<ts sinijiis (ii-,mi^ cd the ^ttiUL usuki Notko (-intc no -.petiiK piiiM ait ^hov^nig 

\\>.i>> iiMdc* In {ospon^c appelLml dyun ptnnis out iht tcnuiiks abo\i„ ih.iT cicaiK show the matiiKf 
in \\h\Lh some ol sich claims Uttiher di'^tttiuuish I eeds \ppc11aat thus Kumalh ut.iue'^t-. < spei-iiic 
h( Wing ot the subject matter m ALL of the clauns in a n futuie action Note exccipt t om MPbl 
cited above. 

Again, appellant respectfully asserts that at least tlie third element of the prima facie case of 
obviousness has not been met, as noted above. 

Group iU6: Claim 30 

Witit respect to Claim 30, the Examiner has relied on Col. 4, lines 36-67; and Col 5, lines 1-44 in 
Leeds to make a prior art showing of appellant's claimed technique "Svherein identifying the URL 
further comprises examining text surrounding the URL to detemvine a likelihood that the URL is an 
address of a web site associated with unsolicited messages." 

Appellant respectfully asserts that Leeds merely discloses that "previously read junk e-mail can be 
added tojhe oles to look for ceitain phras^^^ and that "[t]his may nor be stdTicient, however, 
to screen out valid vnail that cites or quotes from the junk e-mail." (Col. 4, lines 52-56 emphasis 
added). Fiuther, Leeds discloses that '''l\]t however, the content is combined with an address that 
cannot pass a veritication request, the user may wish to assign a 100% confidence rating, and the 
mail caji optionally be automatically deleted" (Col. 4, Hues 56-59). However, the mere disclosure of 
looking tor certain phrases, as in Leeds, simply fails to even suggest a technique "wherein 
identifying the URL further comprises examining text sarroandiiig the URL to determiiie a 
likelihood that the URL is an address of a web site associated with unsolicited messages" (emphasis 
added), as claimt^l by appellant. Clearly, looking for certain phrases fails to specifically suggest 
"examining text vSurrounding the URL" (emphasis added), in the manner as claimed by appellant. 



In the Examiner's Answer dated 07/02/2007, the Examiner states that "Aronson on eoi. l, lines 52- 
55 discloses a well kTiow[n] technique of fdtefing the e-mail by compaxing it with the "mdMion 

list" (i.e. list or database of trusted addresses)." In addition, tlte Examiner asserts that 

line[s] 50-67 discIos[e] employiag rale handling filter modules. . . to control SPAM" and that "RS(c) 
may be an inciiisioii lisf (emphasis reiiioved). The Examiner liittJier notes that "ai! of the rule 
handling filter modules described herein may be coinbined or applied over a distributed array of 
filtei-s throughout a network" (emphasis removed). 

Appellant respectfully disagrees and points out that Aronson merely discloses that some "known e- 
mait filtering techniques are based ixpon an inclusion list, such that e-mail received from any soiuce 
other than one Hsted , .m the.. ] bctusion , .|ist is discarded as junk" (Col 1, lines 52-55 ■■ emphasis added). 
Additionally, Aronson teaches that a filter module "may be an inclusion list" and that "[o]ther... 
filter modules will filter e-mail based on. . . word or letter combination analysis." and also tliat "alt of 
the rule handling filter mocHdes described herein may be combined" (Col, 5, lines 57-67 - emphasis 
added). 

However, merely disclosing a Altering technique utilizing a e-mail source inclusion list in addition 
to a general fUtering technique based on word or letter combination analysis, in addition to 
disclosing that modules may be combined, does mt teach "examining text surrounding the URL to 
determine a likelihood timt the URL is an address of a web site associated with unsolicited 
messages" (emphasis added), as claimed by appellant. More specifically, general word or letter 
combination analysis fails to specifically disclose "deteimin^ in gj a likelihood that the URL is an 
address of a web site associated with unsolicited messages" (emphasis added), in the manner as 
claimed by appelant. 

Again, appellant respectfully asserts that at least the tiiird element of the prima facie case of 
obviousness has not been met, as noted above. 



Group MI 7: Ckim 31 



With respect to Claim 31, tlie Examiner has relied on Col, 4, iines 36-67; and Col, 5, lines M4 in 
Leeds to make a prior art showing of appellant's claimed technique 'Hvhefei^ the report inchides 
disclaimer information and user definable text." 

Appeiiaiu icspcciUiiiy <iv>eTts tlwi Leeds nieic!\ c'Sv >isos "aulunMUCfilK tienJinii <) leph (in {he 
form of a sciificaUon lequcst i to the purpoticu sondcn (s)' (( ol 4 Unch 38-40 emphasis added) 
further, Leeds disclost,s 'issiung a \etificatio n request and can be in tnan\ foiins iiKluding; (U 
sending a message to the user identified b\ the "From;" or "Reply-To:" tleids and examining 
whether the message can be successfully delivered' (Col. 5, lines 20-23 ~ emphasis added). 
However, such verification request message sent to users, as in Leeds, fails to even suggest a 
technique "wherein the report includes disclaimer information and user definable text " (emphasis 
added), as claimed by appellant. Clearly, the mere di.sclosure of a verification request fails to 
suggest '' disclaimer infotnia tion and user definable text" (emphasis added), in the manner as 
claimed by appellant. 

In the Examiner's Answer dated 07/02/2007, the Examiner alleges that "the list containing the 
names and addresses of the spammers and their hosting authorities is technically a rcpoit, which can 
be sent or transmitted to related authorities for appropriate action." Further, the Examiner relies on 
Col. 3, lines 57-67 and Col. 4, lines 65-67 of Leeds and further states that "[i]t would have been 
obvious to one [ofj ordinary skill in the art to send an e-mail in [a] similar way to the 
administFa tor@aol.com or any hosting authority administering the hosting along with [a] list as an 
attaclunent [as] disclosed by Leeds containing a disclaimer information and user definable text (i.e. 
network address uniquely identifying the user)." 

Appellant respectfltHy disagrees and again notes that merely maintaining a list of mail providers, as 
in Leeds, fails to specifically disclose a "list containing the names and addresses of the spammers 
and their hosting authorities" (emphasis added), as noted by the Examiner. Further, appellant notes 
that, in Leeds, tlie list of mail providers is used in "a determination of the status of mail as junk e- 
nmil or a valid message" (Col. 4, lines 27-28 - emphasis added), and is not used to act as a "report 
includ[ing] disclaimer .. mfommti^^^ and .user . defiMbk. text" (emphasis added), as claimed by 
appellant. 
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Additionally, appellant respectfulLy points out that, as admitted by the Examiner, Col, 3, lines 57-67 
of Leeds teaches that the "senders' origination intbmiatiott is extracted from the e-mail message atid 
an automatic reply (called a veriftcariott request) is created and sent," such that a "verification 
ic^ponse is rcceixcd in response to the verification request, [and] the sender is scored as to the 
ptuKtblc ch.uactcnstics onytnauon, \ctiuius a^d (L'-rub'hiv of ihe nKiiF' iCol ^, hnc^ bO-h'^ ~ 
craph<isK- fidded'^ ikrACver, extiacnnu a sonde's oUifinaiKiu mloimaTioii from an c-nwtl message 
foi Sending a veufication ieque.st as in 1 eeds, does nor e\en ^!'g}:csi a tetiiaujut; "^\ hcwm the \ epoT t 
mciudcb disclaamcr mfonnation and user definable text " (emphasis added), a,«> claimed by appellant. 

In view of the Examiner's argument that "[ijt would have been obvious to one [ofj ordinary skiil in 
the art to send an e-mail in the similar way to the adnunistratpr@ad .com or any hosting authority' 
admimstering the hosting along with [a] list as an attachment [as] disclosed by Leeds containing 
hosting authority and its associated respective network addresses that originate SPAM," it seeras the 
Examiner has simply dismissed the same u?u1e? Officia! Notice (since no specific prior art showing 
was made). In response, appellant, again points om the remar-ks above that clearly show the manner 
in which some of such claims further distinguish Leeds. Appellant tlius tbrmally requests a specific 
showing of the subject matter in ALL of the claims in any fiiture action. Note excerpt trom MPEP 
cited above. 

Again, appellant respectfully asserts that at least the third element of the prima fcicie case of 
obviousness has not been met, as noted above. 

In view of the remarks set forth hereinabove, ail of the independent claims are deemed ailowabte, 
along with any claims depending therefrom. 



In the event a telephone conversation would expedite the prosecution of this application, the 
Examiner may reach the undersigned at (408) 971-2573, For payment of any additional fees due in 
comiection with the filing of this paper, the Conunissioner is authorized to charge such fees to 
Deposit Account No. 50-1351 (Order No. NAnP314). 



Respectfully submitted. 



By. /KEVINZILKA/ Date: September 4, 2007 

Kevin j. Zdka 
Rei> \'o ! 420 

/lika Koiah i' ( 

PC) U>\ /:\\20 

S.m JoNO ( ahfomui ^J*) 172-! 120 

Tcjephono (408)971-2573 

Facsimiie: (408)971-4660 
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